https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T04:11:40.615657+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-06418 cnvd-2018-06418 2026-10-23T04:11:40.618610+00:00 cnvd-2018-06418 https://cve.radiocsirt.org/vuln/euvd-2026-63244 EUVD-2026-63244 2026-10-23T04:11:40.618640+00:00 EUVD-2026-63244 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7486 fkie_cve-2018-7486 2026-10-23T04:11:40.618655+00:00

Blue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and [/m] end tag, without proper restrictions on file types or pathnames, which allows remote attackers to execute arbitrary code via an [m]$.dspinclude("../pathname/executable.jpeg")[/m] approach, where executable.jpeg contains ColdFusion Markup Language code. This can be exploited in conjunction with a CKFinder feature that allows file upload.

 https://cve.radiocsirt.org/vuln/ghsa-pcgv-6rcf-4897 GHSA-pcgv-6rcf-4897 2026-10-23T04:11:40.618687+00:00

Blue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and [/m] end tag, without proper restrictions on file types or pathnames, which allows remote attackers to execute arbitrary code via an [m]$.dspinclude("../pathname/executable.jpeg")[/m] approach, where executable.jpeg contains ColdFusion Markup Language code. This can be exploited in conjunction with a CKFinder feature that allows file upload.

 https://cve.radiocsirt.org/vuln/gsd-2018-7486 gsd-2018-7486 2026-10-23T04:11:40.618706+00:00 gsd-2018-7486